← Back to app

Privacy Policy

Last updated: April 2026 · Chisty Digital Forge, New South Wales, Australia

1. Who We Are

CleanCrumbs is operated by Chisty Digital Forge (ABN 25 864 140 160), based in New South Wales, Australia. For privacy enquiries, contact us at support@cleancrumbs.cloud.

2. What Data We Collect

File data (lead lists):

• Processed entirely in your browser using a Web Worker.
• Never transmitted to any server — not even ours.
• Structurally enforced by our Content Security Policy: pages that handle file data use connect-src 'none', blocking all outbound network requests. Account and billing pages permit only Clerk (authentication) and Stripe (payments) endpoints — never file content.
• Cleared from memory when you close the tab.

Account data (via Clerk):

• Email address.
• Name (optional, if provided).
• Google profile information (if you choose Google OAuth sign-in).
• Stored and managed by Clerk (see below). Retained while your account exists.

Usage metadata (signed-in users only):

• An aggregate count of rows processed and a timestamp are sent to our server to enforce the monthly free-tier quota.
• No file content, headers, cell values, or PII from your rows is ever transmitted — only the integer count.
• Anonymous (non-signed-in) users do not trigger this call.

Payment data (via Stripe):

• Card details and billing address are handled entirely by Stripe.
• We receive only a transaction confirmation and your Stripe customer ID.
• Never stored on our infrastructure.

Technical data:

• No analytics. No tracking pixels. No Google Analytics, Mixpanel, or any similar service.
• Vercel (our hosting provider) collects standard server access logs (IP address, user agent, request path). Retained per Vercel's policy.
• Clerk sets a strictly necessary session cookie for authentication.

3. Third-Party Processors

Processor	Data shared	Purpose	Privacy Policy
Clerk	Email, OAuth profile, session tokens	Authentication & plan management	clerk.com/legal/privacy
Stripe	Payment details, billing address	Payment processing	stripe.com/privacy
Vercel	IP address, access logs	Hosting & serverless functions	vercel.com/legal/privacy-policy

4. Cookies

Clerk sets a session cookie required for authentication. This is a "strictly necessary" cookie and does not require a consent banner under the ePrivacy Directive or the Australian Privacy Act. No other cookies are used. No advertising or tracking cookies are present.

5. Your Rights

Under GDPR and the Australian Privacy Act (APP), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Export your data (via Clerk's account portal).

To exercise these rights, email support@cleancrumbs.cloud or delete your account directly via the CleanCrumbs app's account settings. File data is never held by us — there is nothing to request regarding file content.

6. Data Retention

• Account data is retained while your account exists. Deleting your Clerk account removes all associated data.
• Payment records are retained by Stripe per their policy and applicable tax/legal requirements.
• Server access logs are retained per Vercel's standard policy.

7. Children

CleanCrumbs is not intended for users under 16 years of age. We do not knowingly collect data from children.

8. Changes to This Policy

We will update the "Last updated" date when this policy changes. For material changes, we will provide notice via the app. Continued use after changes constitutes acceptance.

9. Contact

For privacy enquiries: support@cleancrumbs.cloud
Chisty Digital Forge (ABN 25 864 140 160), New South Wales, Australia